CVE-2023-4851

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2023-4850

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2023-4850

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2023-4851

CVE-2023-4851 affects IBOS OA 4.5.5 and is a SQL injection in the vulnerable endpoint flagged as ?r=dashboard/position/edit&op=member. Public disclosure exists, with remote exploitation possible. Multiple connected sources identify the impact as critical/severe and confirm the attacker can remote...

CVE-2023-4851 IBOS OA edit&op=member sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2023-4849

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2023-4849

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has...

Sql injection

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2023-4849

CVE-2023-4849: A SQL injection vulnerability affects IBOS OA 4.5.5, triggered by manipulating the fids parameter in the file path ?r=file/dashboard/trash&op=del. The issue originates from an unknown function within that endpoint, enabling remote exploitation. Multiple sources confirm the vulnerab...

CVE-2023-4849 IBOS OA trash&op=del sql injection

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has...

Sql injection

A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file deletebook.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2023-4848

The CVE-2023-4848 entry concerns SourceCodester Simple Book Catalog App 1.0. Affected component: delete_book.php where manipulating the delete parameter triggers an SQL injection. Root cause is insecure handling of user-supplied input in the delete functionality, enabling remote exploitation. Pub...

CVE-2023-4848 SourceCodester Simple Book Catalog App delete_book.php sql injection

A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file deletebook.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4847

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...